$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft (raw, json) Hash identifier: +NhMqfPJX5/jatZ3QXiKYllvyjSFQH5gpzJJvmKlbpk= Subject key identifier: F3:1B:3D:42:32:4A:2C:43:10:FC:51:79:C5:67:89:86:E7:AF:8F:72 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F4328584D4A35F4DA2AB61AE6D03D1880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft Manifest number: 010D0C9F43285842C17DF555B8C50D6E9612E860 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Sat 28 Mar 2026 22:00:00 +0000 Files and hashes: 1: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (hash: Adv/k4WjvgMzBfEoaQEqEOfAv2lokquKfVbyGhaNkqM=) 2: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl (hash: R5Lftz09MMsiX7tI9aRRhcw9VGMLRGfU4RqdBOEFzbk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f4:da:2a:b6:1a:e6:d0:3d:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 28 22:00:00 2026 GMT Subject: CN=a66c7cc1-5414-46f4-a436-e8d923afcda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:4a:31:fc:fe:4c:74:eb:3c:95:df:c7:94: 62:65:44:1f:be:90:ef:6a:f7:17:1d:52:8d:7b:cd: 84:39:f2:01:51:a4:45:f5:52:ac:b4:96:51:10:5d: e8:62:d3:46:72:00:5c:f4:23:98:22:65:a5:45:c3: 9f:c1:99:88:91:99:cc:e9:c3:b6:5b:d5:30:85:6b: 2a:51:e6:d8:fa:a9:bc:2e:9b:4c:9a:ed:ba:66:de: e0:ba:6a:6b:98:88:3b:72:35:e7:a3:33:3d:f7:1a: 93:7c:05:73:d9:c0:e3:54:14:53:1e:ef:84:1d:04: 87:27:a1:fb:14:7b:fa:1f:b3:86:ae:79:31:6a:71: 7c:9e:eb:3c:07:32:14:db:77:2b:16:e0:68:44:b8: 9c:18:6b:38:fd:71:79:31:26:d5:65:fc:11:fa:f7: e8:99:ba:43:aa:88:36:f6:73:ee:49:24:fc:c4:71: e0:f3:9a:36:06:29:ce:8f:2b:ca:5e:a7:ae:16:65: 84:2e:a4:e8:2b:8b:0b:81:14:bc:95:b0:53:05:71: 94:0b:69:43:d2:97:99:15:38:be:d3:09:a0:17:7a: 53:38:bf:0a:e6:a3:c5:89:a5:c5:24:4b:4b:84:14: 05:ff:ee:94:8e:3c:92:f5:61:7b:85:91:9d:79:8d: 32:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:3D:42:32:4A:2C:43:10:FC:51:79:C5:67:89:86:E7:AF:8F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:48:20:17:c0:b9:d4:2a:83:02:7a:ca:93:81:46:70:0e:30: 04:36:1f:f2:4d:ac:99:0b:cf:e8:c6:5d:65:83:50:fa:ba:43: bc:80:48:41:a8:0e:89:0b:19:19:92:c0:08:1c:02:2c:ec:b8: 8d:04:14:04:52:de:63:a0:77:60:67:44:62:2a:9f:15:ea:e2: 11:0c:9c:c4:f6:70:d7:54:e1:89:e3:9b:be:cd:69:5c:44:33: ea:f3:c1:8f:cc:0c:dd:c8:cb:b9:68:aa:ba:b3:9e:80:0e:55: 64:1b:4c:68:fe:a9:be:cf:68:09:2b:3c:d8:50:0f:5d:b7:0c: a4:c7:97:a9:f1:a5:b3:52:a0:e6:ad:55:b7:26:3c:40:61:a0: 1b:03:f5:28:a0:13:ca:fd:32:69:f2:76:ed:14:4c:0d:70:c9: 3e:80:e7:e5:7d:4a:ad:3e:54:4d:2e:f5:e5:f1:74:18:00:ad: 5a:b1:a4:69:73:33:8a:24:11:8f:d9:2c:bc:07:38:34:9b:e7: 6c:db:2c:b1:5c:8d:f2:90:33:ce:5f:e8:1d:0f:27:06:5c:15: 87:e5:ac:08:ec:ff:d3:bd:29:bd:bf:89:13:d7:1a:21:fb:f1: 06:12:47:41:19:ca:27:a4:b8:09:0d:65:f2:8a:00:a7:f9:71: 34:44:6e:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfTaKrYa5tA9GIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyODIyMDAwMFowLzEtMCsGA1UEAxMk YTY2YzdjYzEtNTQxNC00NmY0LWE0MzYtZThkOTIzYWZjZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBNKMfz+THTrPJXfx5RiZUQfvpDvavcXHVKN e82EOfIBUaRF9VKstJZREF3oYtNGcgBc9COYImWlRcOfwZmIkZnM6cO2W9UwhWsq UebY+qm8LptMmu26Zt7gumprmIg7cjXnozM99xqTfAVz2cDjVBRTHu+EHQSHJ6H7 FHv6H7OGrnkxanF8nus8BzIU23crFuBoRLicGGs4/XF5MSbVZfwR+vfombpDqog2 9nPuSST8xHHg85o2BinOjyvKXqeuFmWELqToK4sLgRS8lbBTBXGUC2lD0peZFTi+ 0wmgF3pTOL8K5qPFiaXFJEtLhBQF/+6UjjyS9WF7hZGdeY0yZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPMbPUIySixDEPxRecVniYbnr49yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMmE1Mzg0OWMtNmY3Ny00 ZTY5LThiMzktYmNiODVkYTkwZjRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4SCAXwLnUKoMCesqTgUZw DjAENh/yTayZC8/oxl1lg1D6ukO8gEhBqA6JCxkZksAIHAIs7LiNBBQEUt5joHdg Z0RiKp8V6uIRDJzE9nDXVOGJ45u+zWlcRDPq88GPzAzdyMu5aKq6s56ADlVkG0xo /qm+z2gJKzzYUA9dtwykx5ep8aWzUqDmrVW3JjxAYaAbA/UooBPK/TJp8nbtFEwN cMk+gOflfUqtPlRNLvXl8XQYAK1asaRpczOKJBGP2Sy8Bzg0m+ds2yyxXI3ykDPO X+gdDycGXBWH5awI7P/TvSm9v4kT1xoh+/EGEkdBGconpLgJDWXyigCn+XE0RG5w -----END CERTIFICATE-----Generated at Thu Mar 26 11:12:23 2026 by rpki-client